Static task
static1
Behavioral task
behavioral1
Sample
b2e380ff05fef7205b65baee911e16756ca1760bf2e881f8039bf044ac0355a0.exe
Resource
win7-20231129-en
General
-
Target
b2e380ff05fef7205b65baee911e16756ca1760bf2e881f8039bf044ac0355a0
-
Size
1.7MB
-
MD5
49b49fd59dce8a9fb24087e8c0adb294
-
SHA1
c31ea56f0a052512181795933c20b4bfd861f8bf
-
SHA256
b2e380ff05fef7205b65baee911e16756ca1760bf2e881f8039bf044ac0355a0
-
SHA512
a6cef6e63084a2ef31b5f57c11673e314aedbb7ccf630ff63d452917b064f2eb32bcb1e3ba0584439c54533d566c39471ceeee15d83a2b145faa68112b821857
-
SSDEEP
24576:hYCEX2vSIzyW3KBsybh+xwPZQ05Ebn9QYhlrMoB58pktRzpbvispXF/HPzEUhSy8:2r2vDR6BsyUEw5n3rBmpkdt9hN9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2e380ff05fef7205b65baee911e16756ca1760bf2e881f8039bf044ac0355a0
Files
-
b2e380ff05fef7205b65baee911e16756ca1760bf2e881f8039bf044ac0355a0.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ojreuacl Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yvlkidcf Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE